Software Update: WinRAR 5.30 Beta 5

RAR Labs has released the fifth beta release of version 5.30 of its RAR and WinRAR archiving tools. The popular compression tool is available for a variety of operating systems, including Windows, Linux, and OS X. It handles most common formats – including rar, zip, cab, arj, lzh, tar, gz, ace, uue, bz2, jar, iso , 7z and z – has a skinnable interface, and support for Zip64 and multivolume cab files. The release notes for this release include information about a recently made news vulnerability is WinRAR, which turned out to be incorrect.

New:

• Information about the critical vulnerability in WinRAR self-extracting archives recently published in news is incorrect. Unfortunately mass media failed to recognize that what was described as WinRAR vulnerability is Windows OLE vulnerability patched in November 2014. Even if unpatched, this Windows OLE vulnerability does not introduce new risk factors for WinRAR SFX archives. Please read this for more details. No patches for WinRAR are needed.
• “Import/Export” commands:
  • WinRAR performs the additional validation of Settings.reg contents for “Import settings from file” command to prevent importing Registry keys unrelated to WinRAR settings;
  • WinRAR specifies the full path to regedit.exe tool to prevent running copies of “regedit” from other folders.

Bug fixed:

• If ‘file’ and ‘file.exe’ were present in the same folder and user double clicked on ‘file’, WinRAR could start ‘file.exe’ instead;
• “Generate report” command could create a report in wrong folder, not that with selected files;
• RAR could crash when unpacking .rar archives with corrupt file headers. Fixed now.

The following downloads are available:
WinRAR 5.30 beta 5 (32bit)
WinRAR 5.30 beta 5 (64bit)
RAR 5.30 beta 5 for Linux (32bit)
RAR 5.30 beta 5 for Linux (64bit)
RAR 5.30 beta 5 for FreeBSD
RAR 5.30 beta 5 for OS X